Security and Privacy in IoT Systems: A Case Study of Healthcare Products

Abstract

Internet of Things (IoT) is facilitated by heterogeneous technologies, which contribute to the providing of innovative services in a large number of application domains. The satisfaction of security and privacy requirements in this scenario are becoming a main challenge for IoT systems and their developers. Nevertheless, most works on IoT security and privacy requirements look at these requirements from a high level view. Hence, important aspects of security and privacy functionalities will be disregarded, causing wrong design decisions. To combat this problem, in our previous work, we summarized the most current documents related to security and privacy functionalities in the setting of IoT and provided a new taxonomy framework that organizes all aspects of security and privacy baselines, guidelines and recommendations. To give an understanding of how the framework can help to improve security and privacy of IoT products, and help to facilitate developing and designing secure and privacy-aware IoT systems, in this paper we delve deeper and demonstrate the usefulness of the framework by a case study of healthcare products, in combination with a recent security classification method.